⚖️ Privacy Policy

Legal Brief AI Assistant

Last Updated: December 13, 2024
Effective Date: December 13, 2024
Previous Version: November 5, 2024
Major Changes:
Data Controller:
ULC Čarnogurský s.r.o.
Registered Office: Tvarožkova 5, 81103 Bratislava, Slovakia
IČO: 35975016
Email: privacy@ulclegal.com
Phone: +421257201717

At Legal Brief AI Assistant, we take your privacy seriously. This Privacy Policy explains how we collect, use, and protect your personal data when you use our Chrome extension, in accordance with:

1. Personal Data We Collect (GDPR Art. 13)

In accordance with GDPR Article 13 and Slovak Privacy Act § 19, we inform you about the following categories of personal data we process:

1.1 Identification Data

Data Type Purpose Legal Basis (GDPR)
Email Address Email verification, account management Art. 6(1)(b) - Contract
Extension ID User identification, usage tracking Art. 6(1)(f) - Legitimate interest
IP Address Rate limiting, abuse prevention Art. 6(1)(f) - Legitimate interest
Location Data (IP-based) Jurisdiction-specific legal citations Art. 6(1)(f) - Legitimate interest
📍 Location Data Details:
When you use the "Suggest Citations" feature, the extension detects your approximate location (country and region) based on your IP address to provide jurisdiction-specific legal citations (e.g., Slovak laws for users in Slovakia, US federal and state laws for users in specific US states). This location data is:

1.2 Usage Data

1.2.1 Website Analytics Data (Google Analytics)

When you visit our website (www.ulclegal.com/assistant/), we collect analytics data only with your consent:

Legal Basis: Consent (GDPR Art. 6(1)(a))
Purpose: Website performance analysis and improvement
Data Processor: Google LLC / Google Ireland Limited
Retention: 26 months (Google Analytics default)
Opt-Out: You can reject cookies via our consent banner or change settings later

See Section 6 (Cookies and Tracking Technologies) for detailed information about how we use cookies and your control options.

1.3 Payment Data (Processed by Stripe)

1.4 Content Data (Temporary Processing Only)

1.5 Information We Do NOT Collect

1.6 Analytics Data (Optional - With Your Consent Only)

Chrome Extension Analytics: With your explicit consent, we collect anonymous usage statistics via Google Analytics to improve the extension:

Data Type Purpose Retention
Extension usage events Understand feature usage (e.g., "persuasive", "simplify", "citations") 14 months
User tier (anonymous/verified/pro) Track conversion funnel and feature adoption 14 months
Session data Measure engagement and active usage 14 months
Anonymized IP address Geographic trends (country/region level only) 14 months
Browser type/version Compatibility testing and support 14 months
🔒 Important Notes About Extension Analytics:
❌ We do NOT collect via analytics:

2. How We Use Your Information

We use your information for the following purposes:

📊 About Analytics:
Analytics tracking in the Chrome extension is completely optional. On first use, you'll see a consent banner asking if you want to help us improve the extension by sharing anonymous usage data. You can choose "Accept Analytics" or "Decline" - either way, the extension works exactly the same. You can change your choice anytime in extension settings.

3. Data Storage and Security

3.1 Where Your Data is Stored

3.2 Security Measures

3.3 Data Retention

4. Third-Party Services

We use the following third-party services:

4.1 Claude AI (Anthropic)

4.2 Stripe

Important: We do not store your credit card information. All payment data is handled securely by Stripe, which is PCI DSS Level 1 certified.

4.3 Google Analytics (Google LLC / Google Ireland Limited)

📊 Google Analytics - Consent Required:
Google Analytics cookies are only activated if you accept cookies via our consent banner. If you reject cookies, we collect only anonymized, privacy-preserving analytics data without using cookies.

4.4 Google Analytics for Chrome Extension (Optional - Consent Required)

✅ Your Control:
You have complete control over analytics tracking. It's OFF by default, you must explicitly opt-in, and you can opt-out instantly at any time. The extension works exactly the same whether analytics is on or off - you lose no functionality by declining.

5. Your Rights (GDPR Art. 15-22, Slovak Privacy Act § 21-29)

Under GDPR and Slovak Privacy Act, you have the following rights regarding your personal data:

5.1 Right of Access (Art. 15 GDPR, § 21 Slovak Act)

You have the right to obtain confirmation whether we process your personal data and, if so, access to:

Response time: Within 1 month (extendable by 2 months for complex requests)

5.2 Right to Rectification (Art. 16 GDPR, § 22 Slovak Act)

You have the right to have inaccurate personal data corrected and incomplete data completed.

5.3 Right to Erasure / "Right to be Forgotten" (Art. 17 GDPR, § 23 Slovak Act)

You have the right to request deletion of your personal data when:

Note: This right is not absolute. We may retain data if required by law or for legal claims.

5.4 Right to Restriction of Processing (Art. 18 GDPR, § 24 Slovak Act)

You have the right to restrict processing when:

5.5 Right to Data Portability (Art. 20 GDPR, § 26 Slovak Act)

You have the right to receive your personal data in a structured, commonly used, machine-readable format (JSON) and transmit it to another controller.

Applies to: Data provided by you and processed by automated means based on consent or contract.

5.6 Right to Object (Art. 21 GDPR, § 27 Slovak Act)

You have the right to object to processing based on legitimate interests (Art. 6(1)(f)) or for direct marketing purposes.

5.7 Right to Withdraw Consent (Art. 7(3) GDPR)

Where processing is based on consent, you have the right to withdraw consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

For Chrome Extension Google Analytics:

You can withdraw your consent to extension analytics tracking at any time by:

  1. Click the extension icon in your browser toolbar
  2. Click on the gear/settings icon or "Settings" button
  3. Scroll to the "Analytics & Privacy" section
  4. Toggle "Analytics Tracking" to OFF
  5. Effect is immediate - tracking stops instantly

For Website Google Analytics:

You can withdraw your consent to website analytics by:

  1. Click the "Cookie Settings" link in the footer of our website
  2. Choose "Reject" to disable analytics cookies
  3. Or clear your browser cookies manually

Universal Opt-Out:

Install the Google Analytics Opt-out Browser Add-on to opt out of all Google Analytics tracking across all websites and extensions.

Important: Withdrawal does not affect the lawfulness of processing that occurred before you withdrew consent.

5.8 Right to Lodge a Complaint (Art. 77 GDPR, § 100 Slovak Act)

You have the right to lodge a complaint with a supervisory authority:

Slovak Supervisory Authority:
Úrad na ochranu osobných údajov Slovenskej republiky
Address: Hraničná 12, 820 07 Bratislava 27, Slovakia
Phone: +421 2 3231 3214
Email: statny.dozor@pdp.gov.sk
Website: dataprotection.gov.sk

5.9 How to Exercise Your Rights

To exercise any of these rights, contact us:

We will respond within 1 month (or 3 months for complex requests, with explanation).

6. Cookies and Tracking Technologies

Important Distinction:
This section covers BOTH our website and our Chrome extension:

6.1 Chrome Extension - Essential Functionality (No Consent Required)

Our Chrome extension uses browser local storage (not cookies) for essential functionality:

This data is stored locally in your browser only and is NOT sent to our servers for tracking purposes. It's required for the extension to function properly.

6.2 Chrome Extension - Google Analytics (Requires Your Consent)

With your explicit consent, the Chrome extension uses Google Analytics 4 (Measurement ID: G-CNW0305LZ8) which may use browser storage for analytics purposes.

How We Ask for Consent (Extension):

  1. On first use of the extension, you'll see a consent banner
  2. You choose "Accept Analytics" or "Decline"
  3. Your choice is saved locally in browser storage
  4. The banner won't appear again unless you reset extension settings
  5. You can change your choice anytime in extension settings → "Analytics & Privacy"

What Extension Analytics Tracks (Only if You Consent):

What Extension Analytics Does NOT Track:

Your Control Over Extension Analytics:

Privacy Protections for Extension Analytics:

6.3 Website Cookies (This Website)

Our website (www.ulclegal.com/assistant/) uses cookies and similar tracking technologies to improve user experience and analyze website traffic. We use Google Analytics to understand how visitors interact with our site.

6.4 Website - Google Analytics Cookies

We use Google Analytics 4 (GA4) to collect information about website usage, including:

6.5 Website - Information Collected via Cookies

6.6 Legal Basis for Cookies and Tracking

Type Purpose Legal Basis Consent Required
Extension - Essential Storage Extension functionality (settings, auth, usage limits) Legitimate interest (Art. 6(1)(f)) No
Extension - Analytics Extension usage analytics (optional) Consent (Art. 6(1)(a)) Yes
Website - Strictly Necessary Essential for website functionality Legitimate interest (Art. 6(1)(f)) No
Website - Analytics Website performance and user behavior analysis Consent (Art. 6(1)(a)) Yes

6.7 Your Cookie and Tracking Choices

For Chrome Extension Analytics:

  1. On First Use: Consent banner appears - choose "Accept Analytics" or "Decline"
  2. Change Later: Open extension popup → Settings → "Analytics & Privacy" section → Toggle OFF/ON
  3. Effect: Immediate - tracking starts/stops instantly

For Website Cookies:

You have several options to control website cookies:

Option 1: Website Cookie Consent Banner

When you first visit our website, you will see a cookie consent banner. You can:

Your choice is stored in your browser's localStorage for 12 months, after which you will be asked again.

Option 2: Change Website Cookie Settings Later

You can change your cookie preferences at any time by clicking the "Cookie Settings" link in the footer of our website.

Option 3: Browser Settings (Affects Both)

You can control cookies through your browser settings:

Option 4: Google Analytics Opt-Out (Affects Both Extension and Website)

You can opt out of all Google Analytics tracking (both extension and website) by installing the Google Analytics Opt-out Browser Add-on.

6.8 Google Consent Mode v2

We implement Google Consent Mode v2, which means:

6.9 Third-Party Analytics Processor

Google LLC / Google Ireland Limited
We use Google Analytics 4 for both website and Chrome extension analytics (with consent). Google acts as a data processor under GDPR.

6.10 What We Do NOT Track

Important clarifications about what we DO NOT collect or track:

6.11 Data Retention for Analytics Data

Data Type Retention Period
Extension - Analytics consent choice Stored in browser until you reset extension settings
Extension - Google Analytics data 14 months, then automatically deleted
Website - Google Analytics cookies 2 years (can be deleted anytime via browser)
Website - Cookie consent preference 12 months (stored in localStorage)
Website - Google Analytics reports data 26 months (Google's default for website)
⚠️ Impact of Rejecting Analytics:

6.12 No Third-Party Advertising or Remarketing

We want to be crystal clear: We do NOT use Google Analytics or any other service for:

Analytics is used solely for understanding how people use our extension and website to make improvements. That's it.

7. Children's Privacy (GDPR Art. 8, Slovak Act § 15)

Our service is not intended for children under 16 years of age (GDPR requirement) or 14 years (Slovak Privacy Act requirement for consent).

We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately at privacy@ulclegal.com and we will delete it within 72 hours.

Parental Notice: If you are under 16 years old, you must have permission from your parent or guardian before using this service.

8. International Users

Our service is hosted in the United States. By using the service, you consent to the transfer of your data to the US. We comply with applicable data protection laws, including GDPR for EU users.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

Continued use of the extension after changes constitutes acceptance of the updated policy.

10. Legal Basis for Processing (GDPR Art. 6, Slovak Act § 13)

We process your personal data based on the following legal grounds:

Processing Activity Legal Basis GDPR Article
Providing AI text analysis service Performance of contract Art. 6(1)(b)
Email verification Performance of contract Art. 6(1)(b)
Payment processing Performance of contract Art. 6(1)(b)
Usage tracking, abuse prevention Legitimate interest Art. 6(1)(f)
Service improvement, analytics Legitimate interest Art. 6(1)(f)
Tax and accounting records Legal obligation Art. 6(1)(c)
Marketing communications (if any) Consent Art. 6(1)(a)
Google Analytics - Extension (optional) Consent Art. 6(1)(a)
Google Analytics - Website (optional) Consent Art. 6(1)(a)
📊 Your Rights Regarding Analytics:
Since analytics is based on consent (Art. 6(1)(a)), you have the right to: Contact us at privacy@ulclegal.com to exercise these rights.

10.1 Legitimate Interest Assessment

Where we rely on legitimate interest (Art. 6(1)(f)), we have assessed that:

You have the right to object to processing based on legitimate interest.

11. Data Security Measures (GDPR Art. 32, Slovak Act § 39)

We implement appropriate technical and organizational measures to ensure data security:

11.1 Technical Measures

11.2 Organizational Measures

11.3 Data Breach Notification (GDPR Art. 33-34, Slovak Act § 41-42)

In case of a personal data breach, we will:

12. Data Retention Periods (GDPR Art. 5(1)(e), Slovak Act § 13)

We retain your personal data only for as long as necessary for the purposes for which it was collected:

Data Type Retention Period Reason
Usage data (API counts) Current billing cycle (1 month) Service provision, resets monthly
Email address (verified users) Until account deletion or 2 years of inactivity Account management
Payment records 10 years Slovak tax law requirement
Selected text content Immediately deleted after processing Not stored
Extension ID Until account deletion or 2 years of inactivity User identification
IP address logs 30 days Abuse prevention
Extension analytics data (if consented) 14 months Extension improvement (Google Analytics default)
Website analytics data (if consented) 26 months Website improvement (Google Analytics default)

After the retention period, data is securely deleted or anonymized.

🔄 Analytics Data Deletion:
Google Analytics automatically deletes data after the retention period. You can also request immediate deletion of your analytics data by contacting us at privacy@ulclegal.com.

13. Automated Decision-Making and Profiling (GDPR Art. 22)

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

The AI text analysis is a tool that provides suggestions, but all final decisions are made by you (the user).

14. Data Protection Officer (DPO)

For privacy-related inquiries, you can contact our Data Protection Officer:

Data Protection Officer:
Email: office@ulclegal.com
Response time: Within 5 business days

Questions About Privacy?

If you have any questions or concerns about this Privacy Policy or how we handle your personal data, please contact us:

Data Controller: ULC Čarnogurský s.r.o.
Email: privacy@ulclegal.com
Support: office@ulclegal.com
Phone: +421257201717

We will respond to your inquiry within 1 month (or 3 months for complex requests).